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[57] ABSTRACT 

A method and apparatus for automatically updating software 
components in one or more agents (end systems) in a 
network. An ASU server generates a multicast request to 
agents within its network domain, identifying the newest, 
available versions of software components that may be 
installed on the agents. Agents compare installed versions 
with the newest versions and respond to the server request 
by indicating components that need to be updated. Compo- 
nents include network and non-network software as well as 
operating system (OS) software. The ASU server then 
transmits the requested components to the requesting agents 
in a self extracting compressed file. The file is installed and 
the components updated without rebooting system software. 

45 Claims, 3 Drawing Sheets 
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METHOD AND APPARATUS FOR 
AUTOMATICALLY UPDATING SOFTWARE 
COMPONENTS ON END SYSTEMS OVER A 
NETWORK 

This application claims priority from provisional patent 
application Ser. No. 60/040,876 filed Mar. 21, 1997. This 
application is a continuation-in-part of Ser. No. 08/766,274 
filed Dec. 13, 1996. 

BACKGROUND OF THE INVENTION 

This invention relates to transmission of information 
between multiple digital devices on a network. More 
particularly, this invention relates to a method and apparatus 
for automatically updating and distributing executable files 
and components via a network in a distributed fashion. 

Related technology is discussed in co-assigned 
co-pending U.S. patent applications Ser. Nos. 08/506,533, 
entitled METHOD AND APPARATUS FOR ASYNCHRO- 
NOUS PPP AND SYNCHRONOUS PPP CONVERSION, 
filed Jul. 25, 1995; 08/502,835 entitled VIRTUAL NET- 
WORKING ARCHITECTURE filed Jul. 14, 1995, and 
08/542,157, entitled METHOD AND APPARATUS FOR 
TRANSPARENT INTERMEDIATE SYSTEM BASED 
FILTERING ON ALAN OF MULTICAST PACKETS, filed 
Oct. 12, 1995 and incorporated herein by reference to the 
extent necessary to understand the invention. 
Networking Devices Standards 

This specification presumes some familiarity with the 
general concepts, protocols, and devices currently used in 
LAN networking applications and in WAN internetworking 
applications. These standards are publicly available and 
discussed in more detail in the above referenced and other 
co-assigned patent applications. 

This specification also presumes some familiarity with the 
specific network and operating system components dis- 
cussed briefly in the following paragraphs, such as the 
simple network management protocol (SNMP) for manage- 
ment of LAN and WAN networks, and the RMON MIBs 
defined for remote network monitoring and management. 
General Network Topology 

FIG. 1 illustrates a local area network (LAN) 40 of a type 
that might be used today in a moderate sized enterprise as an 
example of a network in which the present invention may be 
deployed. LANs are arrangements of various hardware and 
software elements that operate together to allow a number of 
digital devices to exchange data within the LAN and also 
may include internet connections to external wide area 
networks (WANs) such as WANs 42 and 44. Typical modern 
LANs such as 40 are comprised of one to many LAN 
intermediate systems such as 60-63 that are responsible for 
data transmission throughout the LAN and a number of end 
systems (ESs) such as ESs SOa-d, 51a-c, and S2a-g y that 
represent the end user equipment. The ESs may be familiar 
end-user data processing equipment such as personal 
computers, workstations, and printers and additionally may 
be digital devices such as digital telephones or real-time 
video displays. Different types of ESs can operate together 
on the same LAN. In one type of LAN, LAN intermediate 
systems 60-63 are referred to as bridges or switches or hubs 
and WAN ISs 64 and 66 are referred to as routers, however 
many different LAN configurations are possible, and the 
invention is not limited in application to the network shown 
in FIG. 1. 
Packets 

In a LAN such as 40, data is generally transmitted 
between ESs as independent packets, with each packet 
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containing a header having at least a destination address 
specifying an ultimate destination and generally also having 
a source address and other transmission information such as 
transmission priority. Packets are generally formatted 

5 according to a particular protocol and contain a protocol 
identifier of that protocol. Packets may be encased in other 
packets. FIG. 2 illustrates a packet 200. Packet 200 is 
essentially an Ethernet packet, having an Ethernet header 
202 and a 48-bit Ethernet address (such as 00:85:8C;13:AA) 
204, and an Ethernet trailer 230. Within the Ethernet packet 
200 is contained, or encapsulated, an ASU protocol packet, 
represented by ASU header 212, containing a 32 bit ASU 
address 214 (such as 199.22.12033). Packet 200 contains a 
data payload 218 which holds the data the user is interested 
in receiving or holds a control message used for configuring 

15 the network. 
Layers 

Modem communication standards, such as the TCP/IP 
Suite and the IEEE 802 standards, organize the tasks nec- 
essary for data communication into layers. At different 

20 layers, data is viewed and organized differently, different 
protocols are followed, different packets are defined and 
different physical devices and software modules handle the 
data traffic. FIG. 3 illustrates one example of a layered 
network standard having a number of layers, which we will 

25 refer to herein as: the Physical Layer, the Data Link Layer, 
the Routing Layer, the Transport Layer, the Session Layer, 
the Presentation Layer and the Application Layer. These 
layers correspond roughly to the layers as defined within the 
TCP/IP Suite. (The 802 standard and other standards have 

30 different organizational structures for the layers.) 

Generally, when an ES is communicating over a network 
using a layered protocol, a different software module may be 
running on the ES at each of the different layers in order to 
handle network functions at that layer. Examples of software 

35 modules existing within an ES at different layers are shown 
in FIG. 3. 

Drivers and Adapters 

Each of the ISs and ESs in FIG. 1 includes one or more 
adapters and a set of drivers. An adaptor generally includes 

40 circuitry and connectors for communication over a segment 
and translates data from the digital form used by the com- 
puter circuitry in the IS or ES into a form that may be 
transmitted over the segment, which may be electrical 
signals, optical signals, radio waves, etc. A driver is a set of 

45 instructions resident on a device that allows the device to 
accomplish various tasks as defined by different network 
protocols. Drivers are generally software programs stored on 
the ISs or ESs in a manner that allows the drivers to be 
modified without modifying the IS or ES hardware. 

50 NIC Driver 

The lowest layer adaptor software operating in one type of 
network ES is generally referred to as a NIC (Network 
Interface Card) driver. A NIC driver is layer 2 software 
designed to be tightly coupled to and integrated with the 

55 adaptor hardware at the adaptor interface (layer 1) and is 
also designed to provide a standardized interface between 
layer 2 and 3. Ideally, NIC drivers are small and are designed 
so that even in an ES with a large amount of installed 
network software, new adaptor hardware can be substituted 

60 with a new NIC driver, and all other ES software can 
continue to access the network without modification. 

NIC drivers communicate through one of several avail- 
able NIC driver interfaces to higher layer network protocols. 
Examples of NIC driver interface specifications are NDIS 

65 (Network Driver Interface Specification developed by 
Microsoft and 3Com) and ODI (Open Data-Link Interface 
developed by Apple Computer and Novell). 
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Generally, when an ES is booting up and begins building the current value of the MIB and set can change it. While the 

its stack of network protocol software, the NIC driver loads SNMP protocol is simple, the MIB definitions can be 

first and tends to be more robust than other network software difficult to implement because MIB ids use complex data 

modules because of its limited functions and because it is structures which create cross-platform complexities. SNMP 

tightly designed to work with a particular hardware adaptor. S has to translate these complex MIB definitions into ASN.l 

Management and Monitoring of Individual ESs in a Net- which is a cross-platform language, 

work Environment Even if installed in an ES, an SNMP agent cannot be used 

A network such as that shown in FIG. 1 is generally to manage or diagnose an ES or update system components 

managed and monitored within an enterprise by a central where the UDP protocol stack is not working properly, 

Information Services department (ISD), which is respon- 10 which will often be the case when the network connection is 

sible for handling all the interconnections and devices failing. When working, SNMP provides a protocol interface 

shown. The same ISD is generally responsible for managing for higher layer prior art management applications, 

the applications and system components on each of the SNMP is described in detail in a number of standard 

individual ESs in the network. reference works. The wide adoption of SNMP throughout 

Many prior art systems have been proposed to allow an IS 15 the networking industry has made compatibility with SNMP 

staff person to manage and monitor network infrastructure an important aspect of new management and monitoring 

remotely over a network. Such systems include Intel's tools. 

LAN-desk, IBM's NetView, HP's Open View, Norton Prior Art Update Systems 

Administrator, McAfee's ZAC or Novell's Network Man- Prior art systems such as Intel's LAN-desk, and others, 

agement System (NMS). However, these systems generally 20 allow for the installation and updating of applications 

rely on a full network protocol stack to be correcdy running remotely. However, those systems are limited to updating 

effectively on the remote ES in order to accomplish any application level software components. Also, these systems 

remote fiie management operations. Often, however, ES are limited to using network and higher layer protocols, such 

system trouble or software updates results in one or more as IP and IPX, that can be rendered unusable by seemingly 

network protocol functions becoming non-operational. 25 innocuous configuration problems and which therefore 

Under most prior art remote management systems, if any become unreachable, remotely. Additionally, the higher 

part of the remote ES network protocol stack is not working, layer protocols result in a burdensome use of the network as 

the IS manager cannot access an ES through the network and they generate more control packets relative to the number of 

must physically travel to the remote location to fix or packets carrying data than do lower level protocols such as 

diagnose the problem. Also, ISD management becomes 30 layer 2 protocols. This prevents servers from living in 

extremely expensive in terms of ISD's keeping track of resource limited devices, such as switches, for example, 

numerous different software modules on sometimes thou- Further, the higher level protocols require a larger applica- 

sands of systems and of installing new versions or minor tion running on an end system (ES), which requires greater 

fixes of software on each system. It has therefore long been system resources. 

a desire of ISD managers and the owners of large numbers 35 Prior art systems, such as Intel's LAN-desk, use a "push" 

of ESs connected on a network to be able to automatically technology for updating that forces updating at the end 

update software components over the network. Such updat- system, and which requires large database" management 

ing ideally would be capable of updating both application resources to keep track of update statistics such as which 

software components, system software components, and end-station received which update, and which end -station 

even network components while the network is running. <io still needs to be updated with which components, for 

Such a system should also be able to automatically track example. 

version numbers of software in ESs and determine when Login scripts are used in many prior art systems. Login 

update components must be downloaded. scripts are executed each lime a user logs into the network 

Simple Network Management Protocol (SNMP) at an end-system (ES), for example. Login scripts can 

A common protocol used for managing network infra- 45 execute programs at the server, such as programs that 

structure over the network is the Simple Network Manage- inventory component versions running at the ES and that 

ment Protocol (SNMP). SNMP is a layer 7 network and update the ES by "pushing" down components where 

system management protocol that handles network and needed. However, systems using login scripts lack the ability 

system management functions and can be implemented as a to dynamically update components that are actually running 

driver (or SNMP agent) interfacing through UDP or some 50 at the ES. 

other layer 4 protocol. Prior art SNMP installations largely What is needed in the art is a system for automatically 

were not placed in ESs because SNMP did not handle ES installing and updating system level software components 

management or monitoring functions and because SNMP (OS), in addition to applications and agent software 

agents are processor and memory intensive. components, using an improved data link control protocol 

SNMP is designed to provide a simple but powerful cross 55 that requires fewer network resources than conventional 

platform protocol for communicating complex data struc- protocols and which is less burdensome on network traffic, 

lures important to network infrastructure management. Also needed in the art is the ability to "pull" components 

However, its power and platform-independent design makes down from a server (i.e., to update software remotely and 

it computationally intensive to implement, and for that automatically without requiring that agents automatically 

reason it has limited applications in end system management 60 receive and load the newest versions of all software now 

or monitoring. It is primarily used in network infrastructure available, but with the ability to support "push" technology 

management, such as management of network routers and if necessary). 

bridges. For purposes of clarity, the present discussion refers to 

SNMP is designed to support the exchange of Manage- network devices and concepts in terms of specific examples, 

ment Information Base (MIB) objects through use of two 65 However, the method and apparatus of the present invention 

simple verbs, get and set. MIB objects can be control may operate with a wide variety of types of network devices 

structures, such as a retry counter in an adaptor. Get can get including networks dramatically different from the specific 
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examples illustrated in FIG. 1 and described below. It is 
therefore not intended that the invention be limited except as 
done so in the attached claims. 

SUMMARY OF THE INVENTION 

The present invention is a method and apparatus for 
automatic software updating (ASU) in a LAN. According to 
an embodiment of the invention, ASU agents, which are 
software or software plus hardware components, are placed 
within each (or a subset) of the ESs such as 50a-c, Sla-c, 
and 52o-g, connected to the LAN or within server machines. 
These agents may also be a part of a larger agent that 
includes other functions such as implementing prior art 
RMON functional groups an local packets as described in 
co-assigned patent applications, Ser. No. 60/040,876, Ser. 
No. 08/766,274, and Ser. No. 08/881/517. 

According to the invention, on an intermittent basis, 
possibly initiated by a polling packet from the ASU server, 
the ASU agents forward current version information regard- 
ing a subset or all of their software components to an ASU 
server, existing somewhere on the WAN/LAN. According to 
the invention, the server may be a stand-alone device 
connected to the LAN, such as collector 61£ or domain 
collector 65a, or may be implemented within an IS such as 
server/router 64. 

The ASU agents respond to an ASU server request, which 
indicates one or more software components available from 
the ASU server. The ASU server stores the agent responses 
in a server database and updates the agents according to the 
information provided in the agent responses. According to 
the invention, the ASU server may generate a table indicat- 
ing which agents need which software components. When it 
is time to update the agents, as defined through a user- 
programmable ASU manager (ASU Mgr.), the ASU server 
accesses the table and sends out files to the agents. "Safe" 
communication sessions, governed by the ASU protocol, are 
established between the ASU server and one or more agents, 
during which the ASU server transmits files including 
desired software components in a round robin fashion either 
on a file-by-file basis, with each agent requesting a particular 
file receiving that file before the next file is sent out, or on 
an agent-by-agent basis, with each agent receiving all its 
requested files before the next agent receives files. The files 
are then loaded or installed at the agent without having to 
physically reboot the system. If necessary, a "smart agent" 
provides updating the system registry "on-the-fly" using two 
directory paths for those components that cannot be dynami- 
cally updated. According to the invention, the registry path 
is changed to point to a file not currently being used, but that 
will be used at the next reboot to cause an update to system 
components. 

According to one aspect of the invention, a method is 
provided for automatically updating software in a network 
including a server and an agent, comprising the steps of 
generating a server request, wherein said server request 
identifies the newest version level of a software component; 
generating an agent update request if the agent needs said 
newest version level of said software component; and updat- 
ing the agent with said newest version level of said software 
component in response to said update request. 

According to another aspect of the invention, a network is 
provided which comprises a server having a request 
generator, wherein said server generates a server request, 
and wherein said server request identifies the newest version 
level of a software component; an agent, coupled to said 
server and having an update request generator, wherein said 
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agent receives said server request and generates an update 
request if said agent needs said newest version of said 
software component; and wherein said server updates said 
agent with said newest version level of said software com- 

5 ponenl in response to said update request. 

According to yet another aspect of the invention a method 
is provided for automatically updating software in a network 
including a server, a first agent and a second agent, com- 
prising the steps of generating a multicast server request, 

10 wherein said multicast request identifies the newest version 
levels for a first software component and a second software 
component; generating a first agent update request if the first 
agent needs said newest version of one of said first and 
second software components; generating a second agent 

is update request if the second agent needs said newest version 
of one of said first and second software components; and 
updating the first and second agents with said newest version 
levels of said first and second software components in 
response to said first and second update requests. 

20 According to a further aspect of the invention, a network 
is provided comprising a server having a request generator, 
wherein said server generates a server request, and wherein 
said server request identifies the newest version levels of a 
first software component and a second software component; 

25 a first agent, coupled to said server and having an update 
request generator, wherein said first agent receives said 
server request and generates an update request if said first 
agent needs said newest version of one of said first and 
second software components; a second agent, coupled to 

30 said server and having an update request generator, wherein 
said second agent receives said server request and generates 
an update request if said second agent needs said newest 
version of one of said first and second software components; 
and wherein said server updates said first and second agents 

35 with said newest version levels of said first and second 
software components in response to said first and second 
update requests. 

According to yet a further aspect of the invention, a server 
is provided for updating software components in agents, the 

40 server comprising: a request generator for generating server 
requests identifying available versions of software compo- 
nents to a plurality of agents; a memory for storing agent 
update requests generated by any of said agents responding 
to server requests, wherein said server stores update requests 

45 received from said agents, said update requests identifying 
said available software components required by said 
responding agents; and an updating mechanism, wherein 
said server updates said responding agents with said 

so required software components. 

The invention will be further understood upon review of 
the following detailed description in conjunction with the 
drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

55 FIG. 1 is a diagram of a local area network of one type in 
which the invention may be effectively employed. 
FIG. 2 is a diagram of a packet. 
FIG. 3 is a diagram showing a layered network protocol. 
60 FIG. 4 is a block diagram of an embodiment of an ASU 
server according to the invention. 

FIG. 5 is a block diagram of an ASU server according to 
the invention. 

65 DESCRIPTION OF SPECIFIC EMBODIMENTS 

FIG. 1 is a block diagram illustrating a LAN/WAN 
network with ESs having ASU agents and an ASU server 
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according to a specific embodiment of the invention. The installation and configuration process at the end-systems. A 

invention includes two types of primary components, the preferred protocol will be designed with an awareness of the 

agents that reside in ESs and the ASU server that advertises reliability of modern network infrastructures realizing that 

available versions of software components to all agents many prior art protocols are designed with the assumption 

within its domain and updates those agents in response to 5 that network traffic will be very unreliable and that packets 

agent requests for the newer versions of software compo- will often get dropped or lost after they are transmitted. In 

nents. modern networks, in fact, packets rarely get dropped once 

ASU Agent they are sent by the transmitter. A preferred protocol, 

In one embodiment, the ASU agent is implemented in the therefore, eliminates much of the acknowledgement and 
C programming language. The agent executable code is 10 redundant traffic generated by other network protocols that 
launched each time an ES is started or rebooted and the is unnecessary for reliable network operation but maintains 
agent may be tightly bound to ES adaptor driver software. acknowledgment capabilities where necessary. 
Because the ASU agent has no visible ES user interface, the For the purposes of this description of the invention, we 
ES user is unaware of the agent's presence, and can do will refer to the ASU protocol to represent the protocol by 
nothing with regards to reconfiguring the ES that would 15 which ASU servers and agents communicate over the net- 
inadvertently disable the agent. work. Unless the context otherwise requires, the ASU pro- 
ASU Server tocol should be understood to represent any possible proto- 

The ASU server receives update requests from the agents col between ASU servers and agents for the exchange of 
and sorts and aggregates that information into a cohesive management information, generally MIBs, including prior 
database. The ASU server then uses this information to 20 art SNMP-type protocols or including a preferred special- 
update agent software components as necessary on an agent- ized protocol as described above. 

to- agent basis or on a file-by-file basis as will be described Actual File Transfer Process Using Reliable ASU Protocol 

in more detail below. As each update component is potentially fairly large, a 

While the invention may be most easily described as a non-acknowledged preexisting protocolis not sufficient 

network having a single ASU server, it is possible to have 25 where certain types of packets are allowed to be lost, without 

another ASU server on the LAN/WAN assume the update retransmission. This makes transmitting large files diflicult. 

duties of a defective or off-line ASU server. Therefore, according to the invention, a "reliable" ASU 

FIG. 4 is a block diagram of an embodiment of a ASU protocol is denned, which can handle transfer of arbitrarily 
server according to the invention. Like the Agent, the ASU large files with acceptable error handling capabilities and 
server loads automatically when the system starts and 30 acceptable recovery from lost packets. Reliable ASU pro- 
depends upon the same Desk Top Agent (DTA) services to tocol uses an unreliable protocol underneath and performs 
exchange ASU protocol traffic with its Agents. The DTA is acknowledgments and error recovery, and uses a window- 
also used as a packet interface to allow the ASU server to sliding protocol to achieve reliability, 
monitor its own directed traffic as well as the broadcast and Update components are transferred from the ASU server 
multicast traffic flowing within its sphere of management. 35 to an agent in a "safe" communication session governed by 
Protocol for Communications Between ASU Server and the "reliable" ASU protocol. Individual sessions are set up 
Agents between each agent and the ASU server after the ASU server 

According to the invention, a protocol is defined for has decided to send update files. As above, the ASU server 

communications between a ASU server and its agents. The can update a single agent by establishing a single commu- 

specific details of the protocol are not necessary for an 40 nication session with that agent. In this way, agents are 

understanding of the invention, and the protocol may be a updated in an agent-by-agent manner. In another 

prior art network management protocol, such as SNMP or a embodiment, the ASU server establishes multiple, concur- 

subset of standards-based SNMP. rent communication sessions with multiple agents and 

However, the invention is also able to work with a simple updates components simultaneously in a file-by-file manner, 

and more efficient protocol for specifically communicating 45 for example. 

certain kinds of network management information and this In the event that one of the two end nodes, agent (end 

represents a preferred embodiment, A preferred protocol system) or ASU server, are busy during any established 

does not require and is not susceptible to configuration by an "safe" communication session, the ASU protocol ensures 

ES user, so that it is not as easily inadvertently disabled by maintenance of the communication session by providing 

a user as many other network protocols are. A preferred 50 connection oriented protocol functions when necessary. In 

protocol would bind more directly to a NIC driver so that the one embodiment, "keep alive" functionality is provided to 

protocol will load and be functional even if other network keep the session alive (i.e., "keep alive" messages, or 

protocol stacks do not load or are not operating properly. A packets, flow between agent and ASU server on a periodic 

preferred protocol will generally require no acknowledge- basis whether the connection is doing anything or not). As 

ment by default, but will include the ability to establish 55 above, acknowledgement functionality is provided in the 

acknowledgements for reliability and also to include encryp- layer 2 ASU protocol described above, as necessary. Formal 

tion features for security. responses, or acknowledgements, can be sent on a per- 

A preferred protocol may be restricted to communication packet basis or based on a group of packets (e.g., using a 
between intermediate system (IS) ASU servers and end windowing protocol). Sequence numbering of packets is 
system (ES) agents, an area where users do not otherwise 60 provided using an additional header 220 in packets as shown 
need to interface. The ASU server, in one embodiment, is in FIG. 2, for example. This header, denoted a "file man- 
designed to interface with other network management soft- agemcnt header," follows the standard ASU protocol header 
ware through a standards based protocol, like SNMP, to 212 and also carries protocol-type functions that are typi- 
facilitate interoperability with network management soft- cally not part of the ASU protocol. When a "safe" commu- 
ware. 65 nication session is established the sequence number field, 

A preferred protocol will result in lower network traffic, which in one embodiment is a 16-bit field, starts increment- 
be very reliable and will not require an extensive protocol ing. 
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Improved ASU (Automatic Software Upqrader) Agent input and control the files to be updated from an ASU server 

Updates to the ASU agents. The files are provided to the ASU Mgr. 

When ASU is widely deployed within a large institution, by a user, and the ASU Mgr. in turn uses FTP (or some other 

it is impractical to manually update agent software in each fi* e transfer protocol) to transfer these files to ASU servers. 

ES. Therefore, the system provides a mechanism for auto- 5 Once the ASU server receives the files, the ASU server may 

matically updating the ASU agent and all of its components, files 10 ^ a S ents - ^ M &- also allows 

including the DTA and NIC drivers, via the network. The a user to program or configure ASU server polling param- 

mechanism is gencralizable and may be used to automati- c,crs ( c *. when t0 advc k rt *f t0 *&f*> whcn 10 accc P l and 

cally update any number of components, both network and not ac ? e P l ^ponses, whether to advertise one component 

J 1 , ' . * i- . , i f f \ o\ c. „ several components or all components available, etc.) and 

non-network components, including system level (OS) soft- to dale ^ m ( specifically including or excluding 

ware components. The mechanism for doing this is re la- c £ rtai / time inlervals f £ U p dating ). According to one 

uveiy simple within the ASU environment and takes advan- embodimenl 0 f the invention, the ASU Mgr. provides a user 

tage of the fact that all of the ASU s Agent components are ^ me ability t0 driu down int0 the graphical representa- 

dynamically loadable and unloadable; thus they can be tion of each end node (ASU Agent) to find out information 

replaced in operation without having to actually reboot the 15 pertinent to the network, such as the current version of each 

system. ASU component, user name currently logged in, host name, 

According to an embodiment of the invention, an agent etc. 

response to an ASU server request is defined to indicate the Advertising Available Versions of Software Components 

current version level of all software components in the ES. The ASU server uses multicast requests, or 

If the ASU server possesses a newer version of any of those 20 advertisements, to identify the latest version levels for one 

components, the ASU server uses the Down-Load-Module or more components that are currently available. The ASU 

(DLM) capability to transmit to, and execute at, the Agent a server, in one embodiment, broadcasts out the latest version 

self-extracting compressed file with an installer and the one component (e.g. from an update list of available ASU 

needed files within it. The installer replaces the older com- agent components, OS components and NIC drivers 

ponents with the newer versions, unloads the Agent, and 25 received from the ASU manager) at a time with unique ids. 

reloads and restarts the Agent and its services. According to In other embodiments, the latest versions for all components 

another embodiment, the agent response is defined as a are broadcast out concurrendy or a fixed number of com- 

specific request for one or more software components adver- ponents are broadcast out (e.g. 5 out of 25 new components 

tised by the ASU server as being the most recent versions. available). This also helps to keep the load on the server 

Automatic Software Upgrade (ASU) is included in one 30 small by helping to prevent the server from being flooded 

embodiment of the invention because of the huge number of with responses from the agents responding with an update 

ASU agents that will be distributed throughout an enter- request for all or many of the components advertised, 

prise's network. Without ASU, a user or administrator would According to the invention, the ASU server sends out a 

need to manually install software every time a new upgrade multicast advertisement to all agents in its domain every 

for a component is released and this is prohibitively expen- 35 polling interval, for example. The polling process 

sive for any MIS department. With ASU to automatically (requesting, or advertising) is configurable by the user 

update any component at the ASU agent (end-system) from through the ASU manager. The ASU server can be config- 

the ASU server, updating becomes a relatively painless ured to advertise only one component at a time within each 

process. According to a further aspect, this can also be used polling interval, for example every 15 seconds, or it can be 

to help a user install other non-ASU-related components 40 configured to advertise in groups of available software 

such as NIC drivers, system level (OS) software, etc. from components, including all components at once. In one 

one point per multicast segment or domain. embodiment, all available components are advertised or 

The ASU includes a number of innovative features in announced at least once within a specific time period, for 

various embodiments to accomplish the auto updating of the example within a 4 or 5 minute cycle. For example, the ASU 

network environment. 45 server windows through its update directory and advertises 

"Thin" Smart Agent one file at a time or 5 files at a time until all files have been 

The "thin" agent is a part of the agent software that advertised within that cycle. After one advertising cycle, the 

implements just enough of the ASU protocol to be able to ASU server can begin updating agents. Additionally, the 

recognize a poll packet from the ASU server and to deter- polling process can be configured to be active during a 

mine if a newer version is required of the advertised soft- 50 period of time in which updating is inactive or in which 

ware components). The "thin agent" is loaded and run as a accepting agent responses is inactive, 

service under Windows 95. Receiving and Responding to Request by Agent 

Agents request the new version from the ASU server. The In one embodiment, ASU agents receive the broadcast 

ability in what is called the thin agent is what is the DLM in information and compare the latest version information with 

the agent. 55 the version levels of the components that they are currently 

ASU Manager (ASU Mqr.) and ASU Server running. If there is any discrepancy, ASU agents with down 

To help manage the process of Automatic Software version components (components that are indicated 

Upgrade, another application, the Automatic Software outdated) respond by requesting updated versions 

Upgrade Manager (ASU Mgr.) is created. ASU Mgr. is a accordingly, and await to be updated upon a scheduled Auto 

process running on a device with access to the network, and 60 update time slot. A discrepancy exists, for example, where 

can be running on the same hardware as one of the ASU the version of one or more software components currently 

servers as described above. ASU Mgr. discovers all the ASU running at the agent (end system) are older than, or outdated 

servers in the enterprise domain, through a poll/response or by, the latest or newest version available from the ASU 

other mechanism. The ASU manager uses sockets to talk to server as indicated in the advertisements) received from the 

each ASU server and can display a graphical listing on a 65 ASU server. A discrepancy also exists where no current 

management terminal of all the ASU agents in each ASU version of the advertised software component exists at the 

server's domain, for example. ASU Mgr. allows a user to agent (end system). 
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In another embodiment of the invention, an agent receives column (file) of the request table and sends that file in a 

the broadcast information and responds with the agent's point-to-point manner to each agent requesting that file. The 

current version level of one or more software components ASU server then proceeds to the next column (file) that has 

that were advertised by the ASU server. The ASU server then at least one agent requesting that file and sends out that file 

compares the agent's current version levels with the latest 5 to the requesting agents. In another embodiment, the ASU 

version levels of the software components. server engages in a communication session with each agent, 

Agents can make decisions as to whether or not a com- during which the ASU server sends out all files requested by 

ponent should be requested, for example where the compo- that agent. After it has satisfied all of that agents requests, it 

nent in question may conflict with other components cur- moves on to the next agent in the table that had requested at 

rently running on the agent. 10 least one file. In this embodiment, the ASU server provides 

Agents can respond to each advertisement one file at a updated versions of files to agents on an agent -by-agent 

time (one software component at a time) or grouped per basis. In yet another embodiment, the present invention 

advertisement For example, if the ASU server sends out an updates multiple agents concurrently. In this embodiment, 

advertisement for 5 software components (out of 25 multiple concurrent communication sessions between the 

available), an agent can respond one component at a time is ASU server and multiple smart agents provide the capability 

(up to 5 times) or it can respond once for all 5 components. to update multiple agents simultaneously. A particular file 

Communication between a ASU agent and ASU server is can be broadcast out to all agents requesting that file, or 

secure according to the security features described in the different files can be sent to different agents simultaneously, 

above referenced patent applications or in other patent A slow-down mechanism is provided for slowing down, 

applications. 20 or backing off all together, the file transfer process 

Preventing Flooding of the ASU Server (background update traffic) as regular network activity 

If all the agents respond to the multicast advertisement increases. Both the server and the agent in a communication 

immediately, or with a similar delay, there is a good chance session are aware of network traffic through data monitoring 

of flooding the ASU server with more packets than it is able of the buffer pools in the agents. Where the buffer pool is 

to handle. The ASU server in turn may have to drop some 25 completely saturated with regular traffic or network analysis, 

packets depending on the buffer-resources available. To component updating can be rescheduled for a later time, 

avoid this, in one embodiment each agent uses a backoff An update control file in the ASU server controls the 

algorithm that is built into the ASU protocol to calculate the scheduling of the update process. The control file controls 

amount of time to wait before sending the response. Ideally, the number of nodes (agents) that are updated and when they 

this back-off algorithm is designed to spread responses from 30 are updated. For example, if thousands of agents require 

the agents as evenly as possible over a period of time, for updating, the control file can schedule updating to be done 

example with a maximum delay time of 1 second, so that the one agent at a time, or several agents at a time (burst-mode), 

ASU server can more easily handle all response packets. In or even all agents at once. In the meantime, the ASU server 

one embodiment, an agent uses a random number generator, can send out poll packets advertising components and can 

seeded with the unique MAC address of the ES, to distribute 35 receive update requests concurrent with agent updates, 

response packets across the desired response time. In other Agents, for example, can request a component over and over 

embodiments, agents seed a random number generator with until it is actually received by the agent (updated). The same 

two numbers, one based on a changing value such as a control file that is used to send files to the agents has another 

system clock. This redistributes responses from ESs during section that indicates a time for updating to start that is 

each response time. Other response distribution algorithms user-programmable through the ASU manager. The ASU 

are possible that distribute agent responses, including deter- server checks the time, and if it corresponds to the update 

ministic algorithms based on the number of agents respond- time it will start by looking at its own database list indicating 

ing to a given ASU server. the agents and the files they need. The ASU server then 

Flooding is also avoided if fewer than all software com- sends the files to the agents until all files are transferred or 

ponents available are advertised by the ASU server (i.e., by 45 until a stop time has been reached. Through the ASU 

limiting the number of components advertised). manager, a user can program the ASU server to exclude 

Sending Files to Agent certain time intervals for updating (e.g., between 9:00 a.m. 

According to the invention, the ASU server receives and 5:00 p.m., when regular network traffic may be 

requests from each agent and stores the requests in table heaviest), to include certain time intervals for updating (e.g., 

form, for example, with each file defining a column entry 50 between 8:00 p.m. and 10:00 p.m.), to schedule updates at 

and each requesting agent defining a row entry. FIG, 5 is a specified intervals (e.g., every 3 minutes), and to set a 

block diagram of an ASU server 300 according to the maximum number of nodes (agents) that can be updated 

invention. Request generator/controller 310 is operative to simultaneously (e.g., 10 nodes at a time or 100 nodes at a 

generate and transmit server requests, or advertisements, and time). Polling or advertising during any exclusion period 

to receive agent responses from agents within its domain. 55 still occurs, but responses are not recorded at the ASU 

Controller 310 is coupled to memory 304. Controller 310 is during exclusion periods, 

also operative to generate a response, or update request, Updating at the End System 

table 306 in memory 304, and to access table 306. Although, According to one embodiment of the invention, new files 

as shown, each responding agent defines a column, and each received by an ASU agent (at an end system) are stored in 

requested component defines a row, the invention is not 60 one or more special update directories. These files a re copied 

limited to such a configuration. Table 306 may be configured to their respective directories when all requested files have 

in any manner as is well known in the art. been received. For ASU components, proper Windows 95 

In one embodiment, once all components in the update registry entries are modified to reflect Auto update status at 

directory have been advertised and once all responses the time that files are copied. Because some of the compo- 

(version requests) have been received from the agents, the 65 nents may be in use at the time of update, the components 

ASU server sends out files in round-robin fashion within one are not immediately loaded and used. Instead, according to 

file type. For example, the ASU server accesses the first the invention, the Windows 95 operating system registry 
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information is updated to point to the new file components. The invention has now been explained with reference to 

Then, the next time that the operating system is rebooted, specific embodiments. Other embodiments will be apparent 

this modified registry information is used by the operating to those of ordinary skill in the art upon reference to the 

system to pick up the updated components. Updates to some present description. It is therefore not intended that this 

components may be made immediately where allowed by 5 invention be limited, except as indicated by the appended 

the operating system. For example, .sys files in Windows NT claims, 

and .vhd files in Windows 95 can be immediately copies What is claimed is: 

over. However, .exe files (and any .dll files associated 1. A method of automatically updating software in a 

therewith), when loaded and running cannot be updated until network including a server and an agent, comprising the 

the system is rebooted. to steps of: 

This is distinct from standard windows 95 setup applica- a ) generating a server request, wherein said server request 
tion reboot, where the setup program instructs a user to identifies the newest version level of a software corn- 
perform a reboot after installing new components in order to ponent; 

cause the operating system to recognize the need for loading b ) generating an agent update request if the agent needs 

other operating system modules. is ^ newest version level of said software component; 

The present invention performs updates in one embodi- ^ 

ment by providing for two directory paths and updating the x , , , . . . , , . . - 

• « L aj. ■ .* .u a. \u u n c) updating the agent with said newest version level of 

registry on-the-fl/ to point to the new update path when all 7 software com orient in res onse to said u date 

updated components have been received from the network. sai so arc ^rop 01 ^ 11 m response o sai up 

In this embodiment of the current invention, the registry path 20 reques . . 

, * . - , , /.| . .i u • uL iu* t 2. The method of claim 1, wherein said step b) of 

is changed to point to a file not currently being used, but that . 4 ' . , , t . t r % 

, . . . , . , 7 * . > t generating an agent update request includes the steps of: 

will be used at the next reboot to cause an update to system 6 5 5 r M r 

components. This indirection provides a flexible way for the 0 comparing said newest version level with a version 

agent to perform updates on a continuous basis whereby the level of said software component that is currently 

automatic updates can happen at any time. These updates are 25 installed on the agent; and 

facilitated by the presence of the smart agent existing on the ii) generating said response only if there is a discrepancy 

ES, always able to be polled by the ASU server to respond between said newest version level and said currently 

to update requests. Many prior art systems required users to installed version level. 

log out periodically in order to run a network script to check 3. The method of claim 1, wherein said update request 

for new system components. This can cause problems when 30 indicates a version level of said software component that is 

the network incorrectly logs out a user that the network has currently running on the agent, and wherein said step c) of 

incorrectly determined is not using network resources. Some updating the agent includes the steps of: 

prior art systems have proposed an agent residing on the ES j) comparing said newest and said current version levels; 

to receive update packets, but these agents cannot perform and 

version control as efficiently as the present invention. 35 ^ updaliag me agent only ^ there ^ a discrepancy 

When a system software component of the end-system is between said newest version level and said currently 

updated by the ASU agent, a message is displayed to the user installed version level. 

to this effect. This message is customizable on a per com- 4 ^ mcthod of claim Xy wherein said step of updating 

ponent basis by the administrator from the ASU Mgr. the t includes tne steps 0 f : 

According to one embodiment of the invention, system 

. 6 , j . i) transmitting the newest version of said software com- 

configuration managers and service managers are used to J t t *? , 

dynamically update NIC drivers and services while the P onent 10 the a * eDt; and 

network is operating (i.e., without having to reboot). The ») installing said newest version of said software corn- 
system configuration manager in Windows 95, for example P onent without rebooting system software, 
can be used to temporarily unload the NIC driver and unbind 45 5. The method of claim 4, wherein said step of installing 
the protocols currently bound to it. The configuration man- includes the steps of: 
ager then reloads the NIC driver, which is the new version, i) uncompressing said component; 
and notifies the different protocols installed on the system to jf) replacing said current version with said newest version; 
rebind to the NIC driver, all without physically rebooting the ^ umoading me agent; ant j 

system. Using the system service manager of Windows NT, 50 . x , ,. , t . . 

/ . 6 J . , , | # a a tv) reloading and restarting the agent. 

for example, a service can be temporarily stopped and • * c . . - " . r . , A 

4 . - n u *• Ku \ a 6. The method of claim 1, wherein said software compo- 

updated without physically rebooting the system. A service . , . „ . . ' . . . . . r 

• j u * -a • ,u i i f.k ^a^™ nent is dynamically loadable and unloadable. 

is any node that resides m the kernel of the system software - ~ . , • i L • j 

, i , . . . , . J . . , 7. The method of claim 1. wherein said software compo- 

that is hidden to the user, and which always launches and . , " * . , , A A . f , 

L \ , J nent includes one of network interface card driver software 

runs whether or not a specific user is logged into the system. 55 . f 

In a further embodknent, the ASU server can download a ™\ **«°P *&f *™ . . 

8. The method of claim 1, wherein said software compo - 

"magic bullet which executes in its own process space as an t . , , . ._ c . ~ _ 

. r*^ , . . li -n- « • u ii ■ » nent includes an operating system (OS) software compo- 

mdependent executable. The "magic bullet can interface y t, j \ / r 

with Windows 95 and force the thin smart agent and all of ne ° l * 

its components to end and unload. At that time, the "magic 60 A DCtwork comprising: 

bullet" can uncompress the new thin agent executable and a) a server having a request generator, wherein said server 

reinstall the updated thin agent. The "magic bullet" can then generates a server request on a communication channel, 

tell the service manager to restart the service which causes and wherein said server request identifies the newest 

the new binary image to be reloaded and then the thin smart version level of a software component; 

agent can reload the needed dynamic components. This 65 b) an agent, coupled to said communication channel and 

implementation works in the Windows NT and more having an update request generator, wherein said agent 

advanced versions of the Windows95 operating system. receives said server request and generates an update 
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request if said agent requires said newest version of 
said software component; and 
c) wherein said server updates said agent with said newest 
version level of said software component in response to 
said update request. 

10. The network of claim 9, wherein said agent compares 
said newest version level with a version level of said 
software component that is currently installed on said agent, 
and wherein said agent generates said update request only if 
there is a discrepancy between said newest version level and 
said currently installed version level. 

11. The network of claim 9, wherein said update request 
indicates a version level of said software component that is 
currently installed on said agent, and wherein said server 
compares said newest version level with said currently 
installed version level, and wherein said server updates said 
agent only if there is a discrepancy between said newest 
version level and said currently installed version level. 

12. The network of claim 9, wherein said server updates 
said agent by transmitting the newest version of said soft- 
ware component to said agent, and wherein said newest 
version of said software component is installed by said agent 
without rebooting system software. 

13. The network of claim 12, wherein said component 
includes an installer, and wherein said installer 

i) uncompresses said component; 

ii) replaces said current version with said newest version; 

iii) unloads the agent; and 

iv) reloads and restarts the agent. 

14. The network of claim 9, wherein said software com- 
ponent is dynamically loadable and unloadable. 

15. The network of claim 9, wherein said software com- 
ponent includes one of network interface card driver soft- 
ware and desktop agent driver software. 

16. The network of claim 9, wherein said software com- 
ponent includes an operating system (OS) software compo- 
nent. 

17. A method of automatically updating software in a 
network including a server, a first agent and a second agent, 
comprising the steps of: 

a) generating a multicast server request, wherein said 
multicast request identifies the newest version levels 
for a first software component and a second software 
component; 

b) generating a first agent update request if the first agent 
needs said newest version of one of said first and 
second software components; 

c) generating a second agent update request if the second 
agent needs said newest version of one of said first and 
second software components; and 

d) updating the first and second agents with said newest 
version levels of said first and second software com- 
ponents in response to said first and second update 
requests. 

18. The method of claim 17, wherein said step of gener- 
ating a first agent update request includes the steps of: 

i) comparing said newest version levels with version 
levels of said first and second components that are 
currently installed on the first agent; and 

ii) generating said first update request only if there is a 
discrepancy between at least one of said newest version 
levels and said currently installed version levels of said 
first agent; and 

wherein said step of generating a second agent update 
request includes the steps of: 
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i) comparing said newest version levels with version 
levels of said first and second components that are 
currently installed on the second agent; and 

ii) generating said second update request only if there 
is a discrepancy between at least one of said newest 
version levels and said currently installed version 
levels of said second agent, 

19. The method of claim 17, wherein said first and second 
update requests indicate version levels of said first and 
second components that are currently installed on the first 
and second agents, and wherein said step of updating the 
first and second agents includes the steps of: 

i) comparing said newest version levels with said cur- 
rently installed version levels of said first agent; 

ii) updating the first agent only if there is a discrepancy 
between at least one of said newest version levels and 
said currently installed version levels of said first agent; 

iii) comparing said newest version levels with said cur- 
rently installed version levels of said second agent; and 

iv) updating the second agent only if there is a discrep- 
ancy between at least one of said newest version levels 
and said currently installed version levels of said sec- 
ond agent. 

20. The method of claim 17, wherein said step of updating 
the first and second agents includes the steps of: 

i) transmitting the newest version of said first and second 
software components to the first and second agents; and 

ii) installing said newest versions of said first and second 
software components in said first and second agents 
without rebooting system software. 

21. The method of claim 20, wherein said step of install- 
ing in said first agent includes the steps of: 

i) uncompressing said components; 

ii) replacing said first current versions with said newest 
versions; 

iii) unloading the first agent; and 

iv) reloading and restarting the first agent. 

22. The method of claim 17, wherein said first and second 
software components are dynamically loadable and unload- 
able. 

23. The method of claim 17, wherein said first software 
component includes one of network interface card driver 
software and desktop agent driver software. 

24. The method of claim 17, wherein said step of updating 
the first and second agents includes the step of generating a 
table indicating the version levels of said first and second 
software components required by said first and second 
agent. 

25. The method of claim 20, wherein said step of updating 
further includes the steps of: 

updating said first agent with said newest version of said 
first software component if said first software compo- 
nent is indicated in said table; thereafter 

updating said second agent with said newest version of 
said first software component if said first software 
component is indicated in said table; thereafter 

updating said first agent with said newest version of said 
second software component if said second software 
component is indicated in said table; and thereafter 

updating said second agent with said newest version of 
said second software component if said second soft- 
ware component is indicated in said table. 

26. The method of claim 20, wherein said step of updating 
further includes the steps of: 

updating said first agent with said newest version of said 
first software component if said first software compo- 
nent is indicated in said table; thereafter 
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updating said first agent with said newest version of said 32. The network of claim 27, wherein said first and second 

second software component if said second software software components are dynamically loadable and unload- 

component is indicated in said table; thereafter able, 

updating said second agent with said newest version of M - The netwo* of claim 27 wherein said first software 

said first software component if said first software $ component includes one of network interface card dnver 

, . software and desktop agent dnver software. 

component * indicated in said table; and thereafter ^ ^ netwQrk £ ^ ^ wherem sM ^ 

updating said second agent with said newest version of component includes an operating system (OS) software 

said second software component if said second soft- component. 

ware component is indicated in said table. 35. The network of claim 27, wherein said server includes 

27. A network comprising: 1 a table generator for generating a table indicating the version 

a) a server having a request generator, wherein said server levels of said first and second software components required 
generates a server request on a communication channel, by said & TSl aQ d second agent. 

and wherein said server request identifies the newest 36. A server for updating software components in agents, 

version levels of a first software component and a ^ the server comprismg: 

second software component; a rcc l uest generator for generating server requests on a 

. x - . . . , . t . . . communication channel, said server requests identify- 

b) a first agent, coupled to said communication channel . avaflaMc yen;ions of software com onents l0 a 

and having an update request generator, wherein said plurality of agents- 
first agent receives said server request and generates an a m fof ^ ' u ^ ate ^ ated 5 
update request if said first agent requires said newest 20 any of ^ agcnts responding to scrvcr rcqucsts , 
version of one of sad first and second software com- wherein said server stores update requests received 
ponents; from said agents, said update requests identifying said 

c) a second agent, coupled to said communication channel available software components required by said 
and having an update request generator, wherein said responding agents; and 

second agent receives said server request and generates 25 an update mechanism, wherein said server updates said 

an update request if said second agent requires said responding agents with said required software compo- 

newest version of one of said first and second software nents. 

components; and 37. The server of claim 36, wherein said update requests 

c) wherein said server updates said first and second agents are stored in said memory in a table format wherein each of 

with said newest version levels of said first and second 30 said responding agents defines a column, and wherein each 

software components in response to said first and required software component defines a row. 

second update requests. 38 ■ ^ scrvcr of claim 37 > wherein said server updates 

28. Ihc network of claim 27, wherein said first agent said responding agents with said required software compo- 
compares said newest version levels with a version level of nents on a row-by-row basis. 

said first and second software components currently 35 39. The server of claim 37, wherein said server updates 

installed on said first agent, and wherein said first agent said responding agents with said required software compo- 

generates said first update request only if there is a discrep- nents on a column-by column basis, 

ancy between at least one of said newest version levels and 40. The server of claim 36, wherem said update mecha- 

said currently installed version levels of said first agent. nism is configurable to include a certain time period for 

29. The network of claim 27, wherein said first and second *« updating, wherein updating occurs during said included time 
update requests indicate version levels of said first and period. 

second software components currently installed on said first 41. ™ e server of cl * im 36 > wberein said update mecha- 

and second agents, and wherein said server compares said nism is configurable to exclude a certain time period for 

newest version levels with said currently installed version updating, wherein updating does not occur during said 

levels, and wherein said server updates said first and second 45 excluded time period. 

agents only if there is a discrepancy between at least one of 42. ^ server of claim 36, wherein said request generator 

said newest version levels and said currently installed ver- is configurable to generate a first server request for a first one 

sion levels. °f sa * d available software components and a second server 

30. The network of claim 27, wherein said server updates request for a second one of said available software compo- 
said first and second agents by transmitting the newest 50 nents. 

version of said software components to said first and second 43. The server of claim 36, wherein said request generator 

agents, and wherein said newest version of said software is configurable to generate a first server request for a 

components are installed by said agents without rebooting plurality of said available software components, 

system software. 44. The server of claim 36, wherein said request generator 

31. The network of claim 30, wherein said transmitted 55 is configurable to generate a multicast request to all of said 
components each include an installer, and wherein said plurality of agents simultaneously. 

installer 45. The server of claim 36, wherein said request generator 

. , is configurable to generate a first request to a first one of said 

1) uncompresses said component; t i-. * . j j . . j r 

J r r . plurality of agents and a second request to a second one of 

ii) replaces said current version with said newest version; 6Q said polity of agents. 

iii) unloads the agent; and 

iv) reloads and restarts the agent. ***** 
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